| Cisco 7940 SIP Phone INVITE Message Remote Denial of Service Vulnerability |
|
Class:
|
Failure to Handle Exceptional Conditions
|
|
Credit:
| Humberto J. Abdelnur, Radu State, and Olivier Festor are credited with the discovery of this vulnerability. |
|
Description:
|
Cisco 7940 SIP phones are prone to a denial-of-service vulnerability because the device fails to handle specially crafted SIP INVITE messages.
Exploiting this issue allows remote attackers to cause the device to fail to respond to further call requests and to potentially crash, denying service to legitimate users.
This issue affects version P0S3-08-7-00 of Cisco 7940 SIP phones; other versions may also be affected.
|
| Exploit:
|
To exploit this issue, attackers may use readily available network utilities. The following exploit code is available: |
|
Solution:
| Currently SecuMania is not aware of any solution for this issue.
If you are aware of more recent information, please mail us at: vul[at]SecuMania.org. |
Subscribe to this comment's feed
Show/Hide comments
Show/Hide comment form